Re:AWS SIGv4 and SIGv4A – How AWS signs and verifies API req...
by nhoughto on Thursday September 23, 2021 @09:54PM
(#28637814)
I was pretty sure that you can approximate this in aws iam just with policy conditions on “aws:CurrentTime”
But after much googling it appears not! Seems like a fairly simple additional variables aws could pass through and condition to support, so you can say “only allow this request if the signing time is < 1min ago”, closest you can get is that the policy is only valid after X date! Is a shame!
But after much googling it appears not! Seems like a fairly simple additional variables aws could pass through and condition to support, so you can say “only allow this request if the signing time is < 1min ago”, closest you can get is that the policy is only valid after X date! Is a shame!